What is “Trojan.Generic.3105647”?

The Trojan.Generic.3105647 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Generic.3105647 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan.Generic.3105647?


File Info:
name: 3424D90B5D5B5B5D3117.mlw
path: /opt/CAPEv2/storage/binaries/0800fbc900d99bc315d8a0ecd469b263904b0e7c11632789cad663c7fd4b8232
crc32: BB18D0F7
md5: 3424d90b5d5b5b5d3117356fbc59042a
sha1: 651e162dca514aed573eb9fb3d19fcfeb9e3c2b0
sha256: 0800fbc900d99bc315d8a0ecd469b263904b0e7c11632789cad663c7fd4b8232
sha512: fc74fdfdf77e4894fbb62c476c50daceb2e12dc0bc6895d00099de695644d4b8a750147e8a60426f0b06fa4724f3549c4defe81625d3b097d14e143072e98ebb
ssdeep: 1536:ZKTg6tZkYVxqdE5NLt3mZCSRCEDka6tghN4G:AsixsE5b3mZCwCmAtgD4G
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D7632C02B6E84CB2F6B1373024F567B59A36FC1B5B34C69B8350D9AB5C32640D92935F
sha3_384: 6d3f9ceaf086bc07c5e34c855a37b2420174dace64a27d1666ca2ea9d582c6f405edc51476c81c097e949eb29a7937c3
ep_bytes: 558bec6aff68f8c740006888a1400064
timestamp: 1998-06-18 18:37:33

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Visual Basic Setup Toolkit Uninstaller
FileVersion: 6.00.8169
InternalName: ST6UNST.EXE
LegalCopyright: Copyright © 1987-1998 Microsoft Corp.
LegalTrademarks: Microsoft® is a registered trademark of Microsoft Corporation.  Windows(TM) is a trademark of Microsoft Corporation.
OriginalFilename: ST6UNST.DLL
ProductName: Microsoft® Visual Basic for Windows
ProductVersion: 6.00.8169
Comments: June 18, 1998
Translation: 0x0409 0x04b0

Trojan.Generic.3105647 also known as:

Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Trojan.Generic.3105647
FireEye	Trojan.Generic.3105647
ALYac	Trojan.Generic.3105647
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Riskware.Win32.Agent.ky
Alibaba	Trojan:Win32/Generic.c1b4dda2
Cybereason	malicious.b5d5b5
Symantec	Trojan.Gen.2
Paloalto	generic.ml
ClamAV	Win.Trojan.1770185-1
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Trojan.Generic.3105647
Avast	Win32:CIH-G@dam
Ad-Aware	Trojan.Generic.3105647
Emsisoft	Trojan.Generic.3105647 (B)
Comodo	Malware@#2urnwtmh8lohg
Zillya	Trojan.Patched.Win32.120253
Webroot	W32.Malware.Gen
ViRobot	Trojan.Win32.Z.Agent.73216.FW
GData	Trojan.Generic.3105647
MAX	malware (ai score=85)
VBA32	Trojan.Wacatac
Rising	Trojan.Win32.Generic.13755722 (C64:YzY0OslAMJF8TSXJ)
AVG	Win32:CIH-G@dam

How to remove Trojan.Generic.3105647?

Trojan.Generic.3105647 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X